sensor-datapath-stat-analysis show command incorrectly shows the Default Testing rule set

Technical Articles ID: KB93044
Last Modified: 2/21/2023

Environment

Trellix Intrusion Prevention System (Trellix IPS)

Problem

You issue the command sensor-datapath-stat-analysis show on the sensor CLI. You see that the field Policy Ruleset on the sensor shows the Default Testing policy, but a different policy is applied to the sensor.

For example:

intruShell@MySensor> sensor-datapath-stat-analysis show

Policy Ruleset on Sensor :Default Testing

Solution

Trellix IPS classifies the Policy and Rulesets pushed to the sensor in different cache buckets. They're internally named, such as Default Testing and Default Prevention. This naming convention isn't related to the policy that's applied to the sensor. This behavior is by design.

Affected Products

Known Issue/Product Defect
Network Security Sensor Appliance 9.1.x (EOL)
Network Security Sensor Appliance 11.x
Network Security Sensor Appliance 10.x

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Knowledge Center

sensor-datapath-stat-analysis show command incorrectly shows the Default Testing rule set

Environment

Problem

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

sensor-datapath-stat-analysis show command incorrectly shows the Default Testing rule set

Environment

Problem

Solution

Affected Products

Languages:

Choose your region

Title

Title